Parliamentary question - E-002617/2025(ASW)Parliamentary question
E-002617/2025(ASW)

Answer given by Mr McGrath on behalf of the European Commission

The Commission recently evaluated several adequacy decisions including the one for Israel and concluded that the decisions could be kept in place[1].

This assessment covered all relevant elements of the privacy framework as well as the broader institutional and legal system to the extent it affects the level of protection of personal data transferred from the EU.

As part of this evaluation, the Commission negotiated a significant strengthening of privacy safeguards and individual rights in Israel, specifically for EU data transfers, which was implemented in Israeli law in May 2023, and which was subsequently extended to also apply to domestically processed data.

Monitoring the functioning of adequacy decisions under Article 45(4) of the General Data Protection Regulation (GDPR)[2] is a continuous and comprehensive process, which in practice means that the Commission is following relevant developments in law and practice, based on various sources of information such as reporting from the EU Delegation as well as media reports and information provided by different stakeholders, such as academia, civil society organisations, and the EU’s data protection authorities.

The legal framework gives the Commission the tools to react if the level of protection would weaken, including the possibility to propose the amendment, suspension or repeal of the decision.

Last updated: 22 September 2025
Legal notice - Privacy policy